7.8
CVE-2024-36358
- EPSS 0.53%
- Veröffentlicht 10.06.2024 22:15:11
- Zuletzt bearbeitet 23.10.2025 12:26:12
- Erkennungen
A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1194 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1304 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1337 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1559 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1681 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1822 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1876 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2009 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2204 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2395 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2593 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2971 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3165 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3288 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3445 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3770 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4185 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4416 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4726 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4959 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5137 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5394 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5512 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5761 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5953 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6313 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6658 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6912 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7119 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7303 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7476 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7719 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7943 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8137 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8268 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8438 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8453 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update877 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update690 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1337 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1559 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1681 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1822 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1876 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2009 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2204 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2419 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2593 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2740 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2921 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3165 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3288 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3445 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3530 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3771 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3964 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4185 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4416 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4726 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4959 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5137 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5394 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5512 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5810 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5995 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6313 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6690 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6860 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7119 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7303 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7476 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7719 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7943 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8137 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8268 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8438 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update877 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update690 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update700 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1194 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1304 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1337 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1559 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1681 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1822 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update1876 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2009 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2204 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2395 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2593 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2740 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update2921 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3165 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3288 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3445 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3770 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update3964 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4185 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4416 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4726 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update4959 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5137 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5394 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5512 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5761 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update5953 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6313 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6658 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update6912 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7119 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7303 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7476 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7719 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update7943 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8137 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8268 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update8438 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0 Update update877 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 20.0.1 Update update690 SwEdition long_term_support
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.406 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| Trendmicro | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-1106 Insufficient Use of Symbolic Constants
The source code uses literal constants that may need to change or evolve over time, instead of using symbolic constants.
https://success.trendmicro.com/dcx/s/solution/000298151
https://www.zerodayinitiative.com/advisories/ZDI-24-575/